Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: Qf2n/GbU8+rjlMhIa3+ZGqu3IGQyH6Xm+EWV63FGSF8=
Subject key identifier: 32:84:A3:80:C0:E0:03:DC:11:5B:D6:89:CB:75:35:B7:ED:CB:A1:0F
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 0196B96CF066624662CCEA899CE36258B282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 1405
Signing time: Sat 10 May 2025 09:00:46 +0000
Manifest this update: Sat 10 May 2025 09:00:46 +0000
Manifest next update: Sun 11 May 2025 09:00:46 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: ZWvQMtMddRDgxTjIZfAu7RZbi9sptE2B5r7MOXgpo1Y=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:f0:66:62:46:62:cc:ea:89:9c:e3:62:58:b2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: May 10 09:00:46 2025 GMT
Not After : May 11 09:00:46 2025 GMT
Subject: CN=3284a380c0e003dc115bd689cb7535b7edcba10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:52:83:35:cc:1d:c4:5a:80:70:72:a8:2e:
d7:65:36:86:e4:d7:39:dd:26:c1:49:4e:7d:29:9c:
35:ca:a0:83:10:2d:1e:b0:2e:dc:25:d6:f9:2a:f5:
2c:f9:ac:c3:67:0f:5e:e4:79:f5:b4:20:b5:b6:58:
83:38:fb:6a:25:7e:c2:d2:ec:0a:ea:0f:d6:95:ee:
93:90:30:21:10:ea:76:62:b7:f8:1f:ab:4d:ab:d6:
78:cd:b3:fc:38:26:0f:a1:1f:45:34:2f:01:79:61:
c4:e8:14:e0:ed:3b:af:28:1e:a1:33:50:c8:4f:9c:
28:71:1d:48:c5:69:8d:0b:e1:f1:3b:e6:9f:44:ef:
df:f2:c1:ac:fc:6a:0f:73:8d:3c:08:95:38:03:93:
b2:6b:c0:db:fe:55:93:b7:96:ec:0e:69:4f:b2:a0:
6f:07:12:18:1d:93:df:d1:79:cb:1b:b8:9b:8f:6b:
7f:08:28:86:fa:77:4a:1e:51:0d:d0:e1:78:25:c4:
25:90:13:e4:ca:ab:f5:6e:03:d6:e8:15:b7:55:26:
d9:03:fe:47:9d:2a:88:a5:33:46:f4:4d:c3:42:72:
00:a8:45:32:5a:d1:f8:42:4e:3f:b7:e9:36:fb:e2:
bc:91:92:5d:3e:1f:f0:4c:43:e7:91:a5:f9:dc:be:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:A3:80:C0:E0:03:DC:11:5B:D6:89:CB:75:35:B7:ED:CB:A1:0F
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:56:c2:27:5b:ca:51:ed:e4:e7:08:d9:a2:38:38:15:a4:
8c:39:04:96:35:41:ea:23:b3:ac:a3:64:f7:4b:a5:26:d3:d9:
31:35:ad:4d:13:f8:84:33:3f:24:61:18:8e:60:d9:2f:b9:f8:
62:4d:4c:19:e9:70:39:5a:ca:b9:15:c8:91:7f:93:c3:49:ac:
48:c8:5c:83:10:19:58:da:bd:6d:ea:b8:07:be:ee:1e:d3:ce:
d1:66:0d:fe:bb:e2:ee:50:63:ce:8f:b5:63:ef:b3:79:48:3d:
5a:7e:16:ce:0e:88:41:51:0b:78:ef:9d:0a:c0:43:d2:9a:f1:
74:f8:4c:e3:17:6f:1f:9b:a4:8c:75:a1:a7:64:09:06:2a:42:
cf:a7:cc:a0:91:47:68:4f:f0:99:8e:9d:7f:e8:62:19:6c:70:
71:fa:93:f8:6b:fa:61:9c:cd:7d:ab:67:07:4a:15:e2:10:95:
e8:c6:86:28:e3:29:f3:b1:f2:7d:cd:98:a4:b8:ef:61:67:b4:
1c:42:aa:b2:d3:04:d8:03:62:e7:7e:c1:7c:78:b1:3c:d9:34:
3e:b9:4e:33:78:87:21:69:ee:45:30:22:3b:af:05:4e:4b:2b:
a3:b4:8a:f5:5f:c8:cd:a6:79:51:76:9f:9c:ae:5d:d2:f8:fd:
c7:73:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:18:36 2025 by rpki-client